<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN">
<html><body>
<div class="messageheaderbox">
<div class="messageheaders messageheaders-preview"><br /><span class="tocc"></span></div>
</div>
<div id="messagebody">
<div class="message-htmlpart">
<div class="rcmBody">
<div>Oh, It's a good starter point.</div>
<div>Openssl, installed in old server, is 0.9.7e version.</div>
<div>Openssl, installed in new server, is -0.9.8e verson.</div>
<div>In old server I searched .cnf files and I found several files which are /usr/local/openssl-0.9.7e/xxx/yyyyy.cnf</div>
<div>where </div>
<div>xxx= is directory, </div>
<div>yyyy = name of .cnf file</div>
<div>I queried to /var/cache/yum/updates-released/packages/openssl-0.9.7a-33.10.i686.rpm in old server, I got:</div>
<div>/lib/libcrypto.so.0.9.7a<br />/lib/libssl.so.0.9.7a<br />/usr/bin/openssl<br />/usr/share/doc/openssl-0.9.7a<br />/usr/share/doc/openssl-0.9.7a/CHANGES<br />/usr/share/doc/openssl-0.9.7a/FAQ<br />/usr/share/doc/openssl-0.9.7a/INSTALL<br />/usr/share/doc/openssl-0.9.7a/LICENSE<br />/usr/share/doc/openssl-0.9.7a/NEWS<br />/usr/share/doc/openssl-0.9.7a/README<br />/usr/share/doc/openssl-0.9.7a/c-indentation.el<br />/usr/share/doc/openssl-0.9.7a/openssl.txt<br />/usr/share/doc/openssl-0.9.7a/openssl_button.gif<br />/usr/share/doc/openssl-0.9.7a/openssl_button.html<br />/usr/share/doc/openssl-0.9.7a/ssleay.txt<br />/usr/share/man/man1/asn1parse.1ssl.gz<br />/usr/share/man/man1/ca.1ssl.gz<br />/usr/share/man/man1/ciphers.1ssl.gz<br />/usr/share/man/man1/crl.1ssl.gz<br />/usr/share/man/man1/crl2pkcs7.1ssl.gz<br />/usr/share/man/man1/dgst.1ssl.gz<br />/usr/share/man/man1/dhparam.1ssl.gz<br />/usr/share/man/man1/dsa.1ssl.gz<br />/usr/share/man/man1/dsaparam.1ssl.gz<br />/usr/share/man/man1/enc.1ssl.gz<br />/usr/share/man/man1/gendsa.1ssl.gz<br />/usr/share/man/man1/genrsa.1ssl.gz<br />/usr/share/man/man1/md2.1ssl.gz<br />/usr/share/man/man1/md4.1ssl.gz<br />/usr/share/man/man1/md5.1ssl.gz<br />/usr/share/man/man1/mdc2.1ssl.gz<br />/usr/share/man/man1/nseq.1ssl.gz<br />/usr/share/man/man1/ocsp.1ssl.gz<br />/usr/share/man/man1/openssl.1ssl.gz<br />/usr/share/man/man1/pkcs12.1ssl.gz<br />/usr/share/man/man1/pkcs7.1ssl.gz<br />/usr/share/man/man1/pkcs8.1ssl.gz<br />/usr/share/man/man1/req.1ssl.gz<br />/usr/share/man/man1/ripemd160.1ssl.gz<br />/usr/share/man/man1/rsa.1ssl.gz<br />/usr/share/man/man1/rsautl.1ssl.gz<br />/usr/share/man/man1/s_client.1ssl.gz<br />/usr/share/man/man1/s_server.1ssl.gz<br />/usr/share/man/man1/sess_id.1ssl.gz<br />/usr/share/man/man1/sha.1ssl.gz<br />/usr/share/man/man1/sha1.1ssl.gz<br />/usr/share/man/man1/smime.1ssl.gz<br />/usr/share/man/man1/speed.1ssl.gz<br />/usr/share/man/man1/spkac.1ssl.gz<br />/usr/share/man/man1/sslpasswd.1ssl.gz<br />/usr/share/man/man1/sslrand.1ssl.gz<br />/usr/share/man/man1/verify.1ssl.gz<br />/usr/share/man/man1/version.1ssl.gz<br />/usr/share/man/man1/x509.1ssl.gz<br />/usr/share/man/man5/config.5ssl.gz<br />/usr/share/man/man7/DES.7ssl.gz<br />/usr/share/man/man7/Modes.7ssl.gz<br />/usr/share/man/man7/des_modes.7ssl.gz<br />/usr/share/man/man7/of.7ssl.gz<br />/usr/share/ssl<br />/usr/share/ssl/CA<br />/usr/share/ssl/CA/private<br />/usr/share/ssl/cert.pem<br />/usr/share/ssl/certs<br />/usr/share/ssl/certs/Makefile<br />/usr/share/ssl/certs/ca-bundle.crt<br />/usr/share/ssl/certs/make-dummy-cert<br />/usr/share/ssl/lib<br />/usr/share/ssl/misc<br />/usr/share/ssl/misc/CA<br />/usr/share/ssl/misc/c_hash<br />/usr/share/ssl/misc/c_info<br />/usr/share/ssl/misc/c_issuer<br />/usr/share/ssl/misc/c_name<br />/usr/share/ssl/openssl.cnf<br />/usr/share/ssl/private</div>
<div>I don't understand because rpm has no reference to "/usr/local/openssl-0.9.7e/" path where there .cnf configuration files.</div>
<p><br /><br />Il 29.05.2018 10:43 Jan Just Keijser ha scritto:</p>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%">
<pre>Hi,
On 29/05/18 09:47, Sampei wrote:</pre>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%">I'm using Linux server to create temporary CA and I know openssl maintains a text database of issued certificates and their status. Now I need to migrate this server to another one, so I ask myself how can I export this db. thanks</blockquote>
<pre>the openssl CA "database" usually consists of two files. The location of these files is specified in the openssl.cnf file. The
files are
serial - containing the last issued serial number
index.txt - containing the list of all issued, expired and revoked certificates.
As I said, the location of these files is depending on how you set up your temporary CA.
HTH,
JJK
</pre>
</blockquote>
</div>
<br /><br /><iframe id="fb_xdm_frame_http" title="Facebook Cross Domain Communication Frame" name="fb_xdm_frame_http" src="http://staticxx.facebook.com/connect/xd_arbiter/r/oVjM2wVZ10b.js?version=42#channel=f216f5ab0654142&origin=http%3A%2F%2Fmail.tiscali.it" frameborder="0" scrolling="no"></iframe><iframe id="fb_xdm_frame_https" title="Facebook Cross Domain Communication Frame" name="fb_xdm_frame_https" src="https://staticxx.facebook.com/connect/xd_arbiter/r/oVjM2wVZ10b.js?version=42#channel=f216f5ab0654142&origin=http%3A%2F%2Fmail.tiscali.it" frameborder="0" scrolling="no"></iframe></div>
</div>
<br />
<p>Il 29.05.2018 13:12 Jakob Bohm ha scritto:</p>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<pre>On 29/05/2018 10:43, Jan Just Keijser wrote:</pre>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%">Hi, On 29/05/18 09:47, Sampei wrote:
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%">I'm using Linux server to create temporary CA and I know openssl maintains a text database of issued certificates and their status. Now I need to migrate this server to another one, so I ask myself how can I export this db. thanks</blockquote>
the openssl CA "database" usually consists of two files. The location of these files is specified in the openssl.cnf file. The files are serial - containing the last issued serial number index.txt - containing the list of all issued, expired and revoked certificates. As I said, the location of these files is depending on how you set up your temporary CA.</blockquote>
<pre>Additionally, the openssl ca command stores the complete value of each
issued certificate in a subdirectory specified in openssl.cnf, this
may be needed/useful when importing to other CA software.
Also note that unless a special setting is included (I forget where),
the openssl ca database will be in a different (older) format that
only remembers the most recently issued certificate for a given
subject distinguished name.
Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. <a href="https://www.wisemo.com">https://www.wisemo.com</a>
Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded
<span class="sig">-- openssl-users mailing list To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users">https://mta.openssl.org/mailman/listinfo/openssl-users</a> </span></pre>
</blockquote>
</body></html>
<br><br/><br/>Con Mobile Open 6 GB hai 6 Giga, 600 minuti e 300 SMS per il tuo smartphone a 9€ al mese per sempre. Passa ora a Tiscali Mobile, il nostro mese è vero! <a href='http://tisca.li/Open6GB0318' target='_blank'>http://tisca.li/Open6GB0318</a><br/><br/>